CVE-2011-2487
Published Mar 11, 2020The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
Vendor/product archive
redhat / jboss_portal CVEs
Beta · best-effort6 CVEs tagged to redhat / jboss_portal — 1 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2012-5626
Published Jan 23, 2020EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform…
CVE-2014-0245
Published Jan 2, 2020It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios…
CVE-2013-6495
Published Dec 11, 2019JBossWeb Bayeux has reflected XSS
CVE-2015-7501
Published Nov 9, 2017Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fu…
CVE-2015-5176
Published Aug 11, 2015The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers…
Showing 1-6 of 6 CVEsPage 1 of 1